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(54) Enhanced encryption control system for a mall processing system having data center 
verification 



(57) A key control system comprises the generation 
of a first set of predetermined keys Kp^ which ar^jhen 
used as master keys for a plurality of respective posage 
meters (12). The keys are then related to a respectiveV^ 
meter (12) in accordance with a map or algorithm. The 
predetermined master key Kp^ is encrypted with the 
date to yield a date dependent key related to the 
respective meter (12). The date dependent key is 
encrypted with a unique identifier or the respective 
meter to yield a unique key that is by the respec- 
tive meter to generate digital tokens. The Data Center 
(16) encrypts the date with each predetermined key 
to yield a table of dependent keys K^s. The table 
of Koj's are distributed to verification sites. The verifica- 
tion site reads a meter's identification from a mailpiece 
being verified to obtain the dependent key of the 
meter (12). The verification side (34) encrypts the 
dependent key with the unique identifier to obtain 
the unique meter key which is used to verify tokens gen- 
erated by the meter (12). In the preferred embodiment 
the master key Kp^. the date dependent key K*. and 
the unique key K^. in the meter are stored in the 
meter. In the alternate embodiment the master key 
Kp^ is encrypted with a unique meter identifier to 
obtain and the unique key which is stored in the 
meter (12). The meter then generates its date depend- 
ent key K*j. which is used to generate digital tokens. 
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Description 

The invention relates to mail processing systems 
and methods and more particularly to security of post- 
age metering systems. 

Recent advances in digital printing technology have 
made it possible to implement digital, i.e., bit map 
addressable, printing for the purpose of evidencing pay- 
ment of postage by a postage-meter-like device. Where 
necessary in order to distinguish such postage-meter- 
like devices from the typical postage meter, such 
devices will be called herein Postage Evidencing 
Devices or PED's. In such devices, the printer may be a 
typical stand-alone printer. The computer driven printer 
of such a PED can print the postal indicia in a desired 
location on the face of a mail piece. Further, as used 
herein the postal indicia will be defined as the Postal 
Revenue Block or PRB. The PRB typically contains data 
such as the postage value a unique PED identification 
number, the date and in some applications the name of 
the place where the mail is originating. It must be noted, 
however that the term postage meter as used herein will 
be understood to cover the various types of postage 
accounting systems including such PED's and is not to 
be limited by the type of printer used 

Rom the Post Office's pointofview.it will be appre- 
ciated that a serious problem associated with PED's is 
that the digital printing makes it fairly easy to counterfeit 
the PRB since any suitable computer and printer may 
be used to generate multiple images. In fact many of 
these new PED systems may be using printers that are 
able to print legitimate indicia which are indistinguisha- 
ble from those printed by others that are printed without 
any attempt to purchase postage. 

In order to validate a maitpiece, that is to assure 
that accounting for the postage amount printed on a 
maitpiece has been properly done, it is known that one 
may include as a part of the franking an encrypted 
number such that for instance the value of the franking 
may be determined from the encryption to learn 
whether the value as printed on the maUpieoe is correct 
See tor example, U.S. Patent Nos. 4,757,537 and 
4,775,246 to Edetmann etal. as well as U.S. Patent No. 
4,649.266 to Eckert ft is also known to authenticate a 
maitpiece by including the address as a further part of 
the encryption as descrtoed in U.S. Patent No. 
4,725.718 to Sansone et a! and U S. Patent No 
4.743.747 to Fougere et al. 

U.S. Patent No. 5,170,044 to Pastor describes a 
system wherein include a binary array and the actual 
arrays of pixels are scanned in order to identify t the pro- 
vider of the maitpiece and to recover other encrypted 
plaintext information. U.S. Patent No. 5.142.577 to Pas- 
tor describes various alternatives to the DES encoding 
for encrypting a message and for comparing the 
decrypted postal information to the plaintext information 
on the maitpiece. 

U.K. 2.251.210A to Githam describes a meter that 



contains an electronic calendar to inhibit operation of 
the franking machine on a periodic basis to ensure that 
the user conveys accounting information to the postal 
authorities. U.S Patent No 5,008.827 to Sansone et al, 

5 describes a system for updating rates and regulation 
parameters at each meter via a communication network 
between the meter and a data center. While the meter is 
on-line status registers in the meter are checked and an 
alarm condition raised if an anomaly is detected. 

10 U.S. Patent No. 5,390,251 to Pastor et al. describes 
a mail processing system for controlling the validity of 
printing of indicia on mai [pieces from a potentially large 
number of users of postage meters includes apparatus 
disposed in each postage meter tor generating a code 

75 end for printing the code on each maitpiece. The code is 
an encrypted representation of the postage meter appa- 
ratus printing the indicia and other information uniquely 
determinative of the legitimacy of postage on the mail- 
pieces. The keys for the code generating apparatus are 

20 changed at predetermined time intervals in each of the 
meters. A security center includes apparatus for main- 
taining a security code database and for keeping track 
of the keys for generating security codes in correspond- 
ence with the changes in each generating apparatus 

25 and the information printed on the maitpiece by the 
postage meter apparatus tor comparison with the code 
printed on the maitpiece. There may be two codes 
printed, one used by the Postal Service for its security 
checks and one by the manufacturer. The encryption 

30 key may be changed at predetermined intervals or on a 
daily basis or tor printing each maitpiece. 

It will be appreciated that in order to verify the infor- 
mation in the PRB using the encrypted message, the 
verifier must first be able to obtain the key used by the 

35 particular meter. In trying to deal with mailing systems 
which may incorporate such encryption systems, it must 
be recognized that the mete population is large and 
subject to constant fluctuation as meters are added and 
removed from service. If the same key were to be used 

40 for all meters, the key distribution is simple but the sys- 
tem is not secure. Once the code is broken by anyone, 
the key may be made available to others using the sys- 
tem and the entire operation is compromi s ed. However, 
if separate keys are used respectively for each meter 

45 then key management potentially becomes extremely 
difficult considering the fluctuations in such a large pop- 
ulation. 

European Patent Publication No 0647924, filed 
October 7, 1994, and assigned to the assignee of the 

so instant application, describes a key management sys- 
tem tor mail processing that assigns one of a set of pre- 
determined keys by a determined relationship to a 
particular meter, effectively allowing multiple meters to 
share a single key. The key management system 

55 includes the generation of a first set of keys which are 
then used tor a plurality of respective postage meters A 
first key of the first set of key is then related to a specific 
meter in accordance with a map or algorithm. The first 
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key may be changed by entering a second key via an 
encryption using the first key. 

It has been found that although the system 
described in European Patent Publication No. 0647924 
previously noted and hereafter referred to a the "1000 s 
key system" provides a manageable key management 
system, the system has multiple meters sharing the 
same key. 

It is therefore an object of the invention to provide a 
key management system which provides the improved 10 
security 1000 key system and yet which will allow ease 
of key management in a very large system. 

It is another object to provide a method for easily 
changing the keys for each meter in a manner that pro- 
vides improved security and system wide tracking of the is 
key changes. 

In accordance with the present invention, a key 
control system comprises the generation of a first set of 
predetermined keys Kp^ which are then used as mas- 
ter keys for a plurality of respective postage meters. The 20 
keys are then related to a respective meter in accord- 
ance with a map or algorithm. The predetermined mas- 
ter key Kp^ is encrypted with the date to yield a date 
dependent key related to the respective meter. The 
date dependent key is encrypted with a unique identifier 25 
of the respective meter to yield a unique key that is 
used by the respective meter to generate digital tokens. 
The Data Center encrypts the date with each predeter- 
mined key Kp^ to yield a table of dependent keys 
Kdd's. The table of rW$ are distributed to verification 30 
sites. The verification site reads a meter's identification 
from a maitpiece being verified to look up the dependent 
key Kdd of the meter from the distributed table. The ver- 
ification site encrypts the dependent key Kdd ^ the 
unique identifier to obtain the unique meter key which is 35 
used to verify tokens generated by the meter. 

In a preferred embodiment the method in accord- 
ance with the invention further comprises the steps of 
storing the master key Kp^, the date dependent key 
Kdd. and the unique key , in the meter. *o 

In an alternate embodiment the master key Kp^ is 
encrypted with a unique meter identifier to obtain the 
unique key which is stored in the meter. The meter 
then generates its date dependent key Kdd. which is 
used to generate digital tokens. <s 

The above and other objects and advantages of the 
present invention will be apparent upon consideration of 
the following detailed description taken in conjunction 
with accompanying drawings, in which like reference 
characters refer to like parts throughout and in which: so 

Rg. 1 . is a schematic view of a system which may 
be used in accordance with an embodiment of the 
invention; 

Figs. 2a and 2b illustrates the information which 55 
may be printed in a first embodiment of a PRB in 
accordance with an embodiment of the invention; 
Figs. 3a and 3b illustrate an alternative to the infor- 



mation shown in Rg. 2a and 2b; 

Fig. 4 is a flow chart of the operation for providing 

keys in accordance with an embodiment of the 

invention; 

Rg. 5 is a flow chart of meter operation in accord- 
ance with the preferred embodiment of the present 
invention; 

Rg. 6 is a flow chart of meter operation in accord- 
ance with an alternate embodiment of the present 
invention; 

Rg. 7 is a flow chart of data center operation in 
accordance with the preferred embodiment of the 
present invention; 

Rg. 8 is a flow chart of the verification process; 
Rg. 9 is a block diagram of the preferred embodi- 
ment of the present invention; and 
Rg. 10 is a block diagram of an alternate embodi- 
ment of the present invention. 

In Rg. 1, there is shown generally at 10 an overall 
system in accordance with an embodiment of the inven- 
tion. In the embodiment illustrated, the system com- 
prises a meter or PED 12 interacting with a plurality of 
different centers. A first center is a well-known meter- 
fund resetting center 14 of a type described, for exam- 
ple, in U.S. Patent No. 4,097.923 which is suitable for 
remotely adding funds to the meter to enable it to con- 
tinue the operation of dispensing value bearing indicia. 
In accordance with an embodiment of the invention 
there is also established a security or forensic center 16 
which may of course be physically located at the reset- 
ting center 14 but is shown here separately for ease of 
understanding. Alternatively, such a security or forensic 
center could be an entirely separate faci&ty maintained 
by the Postal Authorities, for instance or two separate 
facilities may be maintained in order to provide levels of 
security, if desired. The dashed lines in Fig. 1 indicate 
telecommunication between the meter 12 and the reset- 
ting center 14 (and/or forensic center 16). 

Typically there may be an associated meter distri- 
bution center 1 8 which is utilized to simplify the logistics 
of placing meters with respective users. Similarly, a 
business processing center 20 is utiized for the pur- 
pose of processing orders for meters and for administra- 
tion of the various tasks relating to the meter population 
as a whole. 

The meter manufacturer indicated at 22 provides 
customized meters or PED's to the distribution center 
18 after establishing operabiity with shop checks 
between the manufacturer and the resetting center 14 
and forensic center 1 6. The meter or PED is unlocked at 
the user's facility by a customer service representative 
indicated here by the box 24. 

At the resetting center 14 a database 26 relating to 
meters and meter transactions is maintained. The reset- 
ting combinations are generated by a secured appara- 
tus labeled here as the Black Box 28. The details of 
such a resetting arrangement are found in U.S. Patent 
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No. 4,097,923, herewith specifically incorporated by ref- 
erence herein, and will not be further described here. 

Database 30 and a secured encryption generating 
apparatus, designated here as Orange Box 32, are 
maintained at the security or forensic center 16. The s 
orange box preferably uses the DES standard encryp- 
tion techniques to provide a coded output based on the 
keys and other information in the message string pro- 
vided to it It will be understood that other encryption 
arrangements are known and the invention ts not limited 10 
to the specific embodiment using DES encryption. The 
security or forensic center 16, wherever maintained, is 
preferably connected by telecommunication with any 
Post Office inspection station, one of which is indicated 
here at 34. is 

Further details are to be found in European Patent 
Publication No. 0647924, previously noted and specifi- 
cally incorporated by reference herein. 

Meter 12, as illustrated, includes a secure dock 40 
that is used to provide a calendar function programmed 20 
by the manufacturer. The clock and calendar function 
cannot be modified by the user. Such docks are well 
known and may be implemented in computer routines or 
in dedicated chips which provide programmable calen- 
dar outputs. Also stored within the registers of the meter 25 
12 are a fund resetting key 42. security key 44. expira- 
tion dates 46 and preferably, an inscription enable flag 
48. Preferably, in order to prevent the breaking of the 
encrypted messages to be printed by the postage 
meter, the security key 44 is changed at predetermined 30 
intervals as discussed below. 

The security key 44 is used in conjunction with a 
DES encrypter in the meter 12 to provide an encryption 
of certain information in the PRB for each printing of the 
PRB on a maiipiece. At each printing operation, the 35 
entire encrypted message may be printed on the mail- 
piece. However, preferably the cipher, hereafter referred 
to herein as an ECODE (also referred to as a digital 
token) is a truncated dphertext produced by DES 
encryption of the message based on postage informa- 40 
tion available to the meter. Verification at the security 
center co n si sts of verifying that the encrypted informa- 
tion is consistent with the ECODE. 

If automatic checking of the ECODE is desired, 
both the ECODE and the plaintext must be machine 45 
readable. A typical length of plaintext information is. for 
example only and not by way of limitation, the sum of 
the met©' ID (typically 7 cfigrts), a date (preferably 2 dig- 
its, suitably the last 2 of the number of days from a pre- 
determined starting date such as January 1). the so 
postage amount (4 digits), and the piece count for a typ- 
ical total of 16 digits. Reading dances for lifting the infor- 
mation either from a bar-code on the maiipiece or as 
OCR are well-known and will not be further discussed. 

A DES block is conventionally 64-brts long, or 55 
approximately 20 decimal digits. A cipher block is an 
encryption of 64 bits of data. It will be appreciated that 
other information may be selected and that less than the 



information provided here may be encrypted in other 
embodiments of the invention. It is however important to 
note that the information to be encrypted must be iden- 
tical to that used in verification. To this end the plaintext 
message may indude data which indicates the particu- 
lar information which is encrypted. This may take the 
form of an additional character, additional bar coding or 
a marking on the maiipiece as may be found desirable. 

If desired, a second ECODE could be printed using 
a DES key from a set of keys PS-DES known to the 
Postal Service. Alternatively the Postal Service could 
elect to manage its own set of keys as described in con- 
nection with the key management system described 
below. 

In a first embodiment as shown in Figs. 2a and 2b. 
the plaintext is encrypted using one of the keys from 
PS-DES. The Postal Service uses the same key from 
the set PS-DES to verify the message. A higher level of 
security is provided by the second ECODE. 

In a second embodiment two ECODEs are gener- 
ated and printed on the maiipiece. one using a PS-DES 
key provided by the Post Service and the other using a 
Vendor-DES key provided, for example, by the manufac- 
turer or security center. The Postal Service can then 
verify the message using its own code generating and 
key management system while the vendor can sepa- 
rately verify the vafkfty of the message using the 
ECODE generated using its separate key system. Figs. 
3a and 3b show the format of this second embodiment 

Fig. 4 shows an arrangement for managing meter 
master keys as cfisdosed in European Patent Publica- 
tion No. 0647924, previously noted. First a large, fixed 
set of predetermined keys K^'s is generated, at step 
400. As seen below, the system S in accordance with 
the invention comprises a set of pointers {p}, a set of 
keys indexed by the pointer {keyp} and a map F or gen- 
erating algorithm from the set of meter ID'S {M} to the 
set of pointers. Thus: 

Ss(F, {p}, keyp} ) is the system 
F:{M}->(p) 

and 

F(M) » F(meter ID)*p 
finds the pointer to the key for a given meter M. 

Thus, returning to Fig. 4, as an example, the set of 
pointers {p} which may be the integers from 1 to 1000, 
are created from meter parameters, at step 405. The 
function F may be then chosen as. again for example, 
the DES encryption of meter ID using a DES key K, 
preferably truncated to three digits, at step 410 and a 
look-up table is generated, at step 415. It will be under- 
stood that other functional relationships may be chosen. 
The look-up table comprises a set of meter ID'S and 
their assigned pointers. For the greatest security, it will 
be approbated that the relationship between a pointer p 
and the corresponding key should not be easily discov- 
erable nor should the relationship between the pointer 
and the meter ID. ft will also be understood that the 
function F should be maintained in secret 
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Referring now to Figs. 5 and 9. the preferred 
embodiment of the present invention is shown. At step 
420, using the meter ID of a specific meter in the look- 
up table, the corresponding Kp^ is stored in the meter 
At step 430. a date dependent key is generated 5 
from the predetermined key Kp red by encrypting the 
date with Kp fed to yield the for the meter. At step 
435, a unique meter identifier, such as a meter serial 
number, is encrypted with the date dependent key 
to produce a unique key K^t tor the meter. The meter ro 
generates digital tokens using its unique key K^. 

Referring now to FIGs. 6 and 10. an alternate 
embodiment of the meter operation is shown. At step 
470. a unique meter identifier, such as a meter serial 
number, is encrypted with the predetermined master is 
key Kp^ to yield a unique key K^, for the meter. The 
unique meter key is stored in the meter at step 
475. Kfinai is used to generate a date dependent key Km 
in the meter by encrypting the date with K, M to produce 
date dependent key K^. 20 

Referring now to Fig. 7, the data center operation 
for the preferred embodiment is shown. At step 450, the 
date is encrypted with each predetermined master key 
to yield a table of date dependent keys K^'s. At 
step 455. the data center distributes the table of K^'s to 25 
each of the verification sites for use in verifying digital 
tokens generated by the meters. 

Referring now to Fig. 8. a verification process is 
shown using the key management system in accord- 
ance with an embodiment of the present invention. In 30 
order to verify a mailpiece, the meter ID number printed 
on the mailpiece is read at step 500. At step 510. using 
the meter ID number a date dependent key is found 
in the table of K^'s cfistrfouted by the data center. The 
key is found using the lookup table or algorithm F from 35 
the given meter number. At step 515, the identical 
unique meter data that was used by the meter to obtain 
the meter's unique key K^, is encrypted with the date 
dependent key K^. At step 520, the identical plaintext 
information used to create the ECODE is now encrypted 
at the security center using K^, and the result is com- 
pared with the code printed on the mailpiece, at step 
530. If there is a ma tch at decision at step 540. the mail- 
piece is valid. If not the NO branch will trigger an alarm. 

Returning for the moment to Fig. 2a and Fig. 3a, the 
Postal Service is able in these embodiments to obtain 
the PS-DES pointer directly from the indicia without 
using the process shewn in Fig. 8. In the cases illus- 
trated in Figs. 2b and 3b. the DES pointer is obtained by 
using a predetermined algorithm applied to the informa- 
tion printed in the PED ID as described in connection 
with Fig. 8. 

While the present invention has been disclosed and 
descrtoed with reference to the embodiments disclosed 
herein, it will be apparent that variations and modifica- 
tions may be made therein. It is thus, intended in the fol- 
lowing claims to cover each variation and mocffication 
that falls within the true spirit and scope of the present 



invention. 
Claims 

1. A method fa key management for controlling the 
keys used in encoding information to be printed on 
a mailpiece for validating the mailpiece. the method 
comprising the steps of : 

generating a plurality of keys K to obtain a fixed 
key set Kp^^n); 

assigning one of said plurality of keys Kp red to a 
particular postage meter M (12) by means of a 
determined relationship associated with the 
postage meter (12), said relationship being 
derived as a predetermined function F(M) cor- 
responding to the particular postage meter; 
encrypting said assigned key Kp^j with a date 
to obtain an assigned date dependent key K^; 
and 

combining the assigned date dependent key 
with information unique to the particular 
postage meter M uni to produce a final key 
for the particular postage meter M. such that 

Kftnal= f (Kdd. Muni)- 

2. The method of claim 1 wherein said determined 
relationship associated with the postage meter is a 
pointer p associated with the particular postage 
meter M, said pointer p being derived as a function 
F(M) corresponcfing to predetermined parameters 
of the particular postage meter M. 

3. The method of daim 1 or 2 further comprising the 
steps of: 

encrypting a date with each Kp^ in said fixed 
key set Kp^.,,) to yield a table of date 
dependent keys K^.^; and 
distributing said table of date dependent keys 
Kdd(i-n) to verif ication sites 

4. A method for key management for controlling the 
keys used in encoding information to be printed on 
a mailpiece for validating the mailpiece, the method 
comprising the steps of: 

generating a plurality of keys K to obtain a fixed 
key set Kp^.,,): 

assigning one of said plurality of keys Kp red to a 
particular postage meter M by means of a 
determined relationship associated with the 
postage meter, said relationship being derived 
as a predetermined function F(M) correspond- 
ing to the particular postage meter: 
combining the assigned key Kp^ with informa- 
tion unique to the particular postage meter M uni 
to produce a final key for the particular 
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postage meter M, such that K^pf^, Muni): 
and 

storing said final key K^, in the particular 
postage meter M. 

5 

The method of claim 4 further comprising the steps 

of: 

encrypting said final key with a date to 
obtain a date dependent key K*j for the parte- io 
ular meter M; and 

storing said date dependent key in the par- 
ticular meter M. 

The method of claim 4 or 5 wherein said deter- is 
mined relationship associated with the postage 
meter is a pointer p associated with the particular 
postage meter M, said pointer p being derived as a 
function F(M) corresponding to predetermined 
parameters of the particular postage meter M. so 

A method for key management for controlling the 
keys used in encoding information to be printed on 
a maitpiece for validating the mailpiece, the method 
comprising the steps of: 2$ 

generating a pturaity of keys K to obtain a fixed 
key set Kp^^n); 

assigning one of said plurality of keys Kp^ to a 
particular postage meter M by means of a 30 
determined relationship associated with the 
postage meter, said relationship being derived 
as a predetermined function F(M) correspond- 
ing to the particular postage meter; 
installing the assigned key Kp^ in the parbcu- 35 
lar postage meter M; 

encrypting said assigned key with a date 
to obtain an assigned date dependent key K^; 
and 

combining the date dependent key K** with 40 
information unique to the particular postage 
meter to produce a final key K^, tor the 
particular postage meter M, such that K^. 

nai^Kdd* Muni)- 

45 

A method for key management for controlling the 
keys used in the verification of encoded information 
to be printed on a mailpiece, the method compris- 
ing the steps of: 

so 

generating a plurafity of keys K to obtain a fixed 
key set K pr#d(1 . n) ; 

encrypting a date with each in said fixed 
key set Kp^i*) to yield a table of date 
dependent keys Kdd(i-n)* 55 
distributing said table of date dependent keys 
Ka^vn) to verification sites; 
reading plaintext information printed on a mail- 



piece, said plaintext information including a 
meter ID identifying a particular postage meter 
M; 

finding a date dependent key correspond- 
ing to the particular postage meter M by means 
of a determined relationship associated with 
the postage meter, said relationship being 
derived as a predetermined function of said 
meter ID; 

encrypting said meter ID with said date 
dependent key to obtain a final key K^; 
encrypting at least some part of the plaintext 
information using said final key K fina , to obtain a 
code; 

comparing said code with encoded information 
printed on the mailpiece; and 
validating the mailpiece when said code 
matches said encoded information. 

9. A system for key management for controlling the 
keys used in encoding information to be printed on 
a mailpiece for validating the mailpiece, comprising: 

means for generating a plurality of keys K to 
obtain a fixed key set K pr#d(1 . n) ; 
means for assigning one of said plurality of 
keys to a particular postage meter M (12) 
by means of a determined relationship associ- 
ated with the postage meter (12), said relation- 
ship being derived as a predetermined function 
F(M) corresponding to the particular postage 
meter; 

means for encrypting said assigned key Kp^ 
with a date to obtain an assigned date depend- 
ent key K^; and 

means for combining the assigned date 
dependent key with information unique to 
the particular postage meter M uni to produce a 
final key for the particular postage meter 
M, such that ^^u^^K^ M^i). 

10. A system for key management for controlling the 
keys used in encoding information to be printed on 
a mailpiece for validating the mailpiece, comprising: 

means for generating a plurality of keys K to 
obtain a fixed key set K pred(1 . n) ; 
means for assigning one of said plurality of 
keys to a particular postage meter M by 
means of a determined relationship associated 
with the postage meter, said relationship being 
derived as a predetermined function F(M) cor- 
responding to the particular postage meter; 
means for combining the assigned key 
with information unique to the particular post- 
age meter M uH to produce a final key for 
the particular postage meter M. such that 
naP f (Kdd. MunJ; and 
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means for storing said final key in the par- 
ticular postage meter M. 



5 



10 



15 



20 



25 



30 



35 



40 



45 



55 



EP0840 258A2 




EP 0 840 258 A2 




EP 0 840 258 A2 



GENERATE LARGE SET 
OF FIXED KEYS ■ 



400 



DETERMINE A SET OF 

POINTERS FROM 
METER PARAMETERS 



405 



CHOOSE FUNCTION F 



410 



GENERATE LOOKUP 
TABLE 



415 



FIG. 4 

KEY MANAGEMENT 



STORE MASTER 
KEY KpredIN METER 



ENCRYPT DATE 
WITH Kp^TO YIELD 
Kdd 



420 



430 



ENCRYPT METER 
SERIAL NUMBER 
WITH K<,dTO 
PRODUCE Kfh«i 



435 



USE KfmaiTO 
GENERATE DIGITAL 
TOKENS 



FIG. 5 

METER OPERATION 



440 



EP 0 840 258 A2 



ENCRYPT DATE 
WITH EACH KpredTO 
YIELD A TABLE OF 
Kdd's 








DISTRIBUTE TABLE 

OF TO 
VERIFICATION SITES 





455 



FIG. 7 

DATA CENTER OPERATION 



ENCRYPT METER 
SERIAL NUMBER 
WITH Kp,edTO YIELD 
Kfinal 








STORE Kfina, IN 
METER 








USE KfinalTO 

GENERATE 
DIGITAL TOKENS 








USE KddTO 
GENERATE 
DIGITAL TOKENS 





470 



480 



485 



FIG. 6 

ALTERNATE METER OPERATION 



EP 0 840 258 A2 



READ METER ID 



FIND DATE DEPENDENT KEY 



ENCRYPT METER ID WITH K*, 
TO YIELD Kfinai 



ENCRYPT PLAINTEXT USING 
KEY Kfinai 



COMPARE WITH CODE 
PRINTED ON MAILPIECE 



NO MATCH 



500 



-► 510 



-t 515 



-t 520 



-► 530 



MATCH 



ALARM FAILED 
VERIFICATION 



■4 540 



VALID 
MAILPIECE 



+ 550 



FIG. 8 

VERIFICATION 



EP0 840 258 A2 



FIXED KEY TABLE 




METER OR PED 



ASSIGN KEY 



MASTER KEY 
Kpred 



LOOKUP TABLE 



METER ID 
1 


POINTERS 


2 
3 


P=> KpredCFiMl) 




WHERE 




1SF{M}51000 


M OF 




METERS 





ENCRYPT W/OATE 



IE 



DATE 
DEPENDENT 
KEYKdd 



APPLY UNIQUE 
METER ID 



I 



UNIQUE 
METER KEY 
Kfinal 



FIG. 9 



FIXED KEY TABLE 



APPLY UNIQUE 
METER ID 




LOOKUP TABLE 



METER ID 
1 


POINTERS 


2 
3 






WHERE 




UF{M)S1000 


M 




« OF METERS 





METER OR PED 




ENCRYPT 
W/DATE 



DATE 
DEPENDENT 
KEYKdd 



FIG. 10 



(19) 



J 




(12) 



(88) Date of publication A3: 

10.05.2000 Bulletin 2000/19 

(43) Date of publication A2: 

06.05.1998 Bulletin 1998/19 

(21) Application number: 97119056.6 

(22) Date of filing: 31.10.1997 



EuropSisches Patentamt 
European Patent Office 
Office europ£en des brevets (1 1 ) EP 0 840 258 A3 

EUROPEAN PATENT APPLICATION 

(51) int. a. 7 : Q07B 17/04, G07B 17/02 



(84) Designated Contracting States: 


(72) Inventor: 


AT BE CH DE DK ES Fl FR GB GR IE IT U LU MC 


Ryan, Frederick W., Jr. 


NLPTSE 


Oxford, CT 06478 (US) 


Designated Extension States: 


(74) Representative: 


AL LT LV RO SI 




Avery, Stephen John et al 


(30) Priority: 01.11-1996 US 742526 


Hoffmann Eitie, 


Patent- und Rechtsanwdtte, 


(71) Applicant: PITNEY BOWES INC. 


ArabeOastrasse 4 


Stamford Connecticut 06926-0700 (US) 


81925 MOnchen(DE) 



CO 

< 

00 

in 

CM 

o 

CO 



(54) Enhanced encryption control system for a mail processing system having data center 
verification 



(57) A key control system comprises the generation 
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used as master keys for a plurality of respective postage 
meters (12). The keys are then related to a respective 
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meter (12). The verification side (34) encrypts the 
dependent key with the unique identifier to obtain 
the unique meter key which is used to verify tokens gen- 
erated by the meter (12). In the preferred embodiment 
the master key K^, the date dependent key K^. and 
the unique key K^, in the meter are stored in the 
meter. In the alternate embodiment the master key 
Kp^ is encrypted with a unique meter identifier to 
obtain and the unique key which is stored in the 
meter (12). The meter then generates its date depend- 
ent key K^ which is used to generate digital tokens. 
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vides value added services corresponding to postage metering 
transactions. Funds are not stored at the user's site reducing the 
risk of unauthorized modification of account balances. There 
is a database record (60) of every mail piece, which means 
that verification will be improved since all valid mail pieces are 
known. Furthermore, the present invention enables the postal 
service to know the volume of mail to be processed prior to 
receipt of the physical mail pieces. Since more mailer data is 
available (e.g. when users usually mail, how much mail per 
day, average postage amount) the virtual postage metering sys- 
tem (10) enables the postal service to predict mail handling 
patterns. Finally, users have the option to pay as they go (130) 
which contrasts present systems in which funds must be on 
deposit prior to being downloaded to a meter although such 
downloaded funds may remain in the meter for weeks before 
being used. 
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VIRTUAL POSTAGE METERING SYSTEM 

This is a continuation-in-part application of U.S. Provisional Patent 
Application Serial Number 60/049518, filed June 13, 1997 and assigned to the 
assignee of the present invention. 

Field of the Invention 

The present invention relates generally to a postage metering system and 
method for evidencing postage payment in an open system and, more 
particularly, to a postage metering system and method for evidencing postage 
payment in a virtual postage metering system 10 configuration. 

Related Applications 
The present application is related to the following International Patent 
Applications Serial Number (Attorney Docket Numbers E-733, E-734, E-735, E- 
736 and E-738), all filed concurrently herewith, all being assigned to the 
15 assignee of the present invention, all of which are incorporated herein by 
reference in their entirety. 

Background of the Invention 
Postage metering systems have been developed which employ encrypted 
information that is printed on a mailpiece as part of an indicium evidencing 
20 postage payment. The encrypted information includes a postage value for the 
mailpiece combined with other postal data that relate to the mailpiece and the 
postage meter printing the indicium. The encrypted information, typically 
referred to as a digital token or a digital signature, authenticates and protects the 
integrity of information, including the postage value, imprinted on the mailpiece 
25 for later verification of postage payment. Since the digital token incorporates 
encrypted information relating to the evidencing of postage payment, altering the 
printed information in an indicium is detectable by standard verification 
procedures. Examples of systems that generate and print such indicium are 
described in U.S. Patents Numbers 4,725,718, 4,757,537, 4,775,246 and 
30 4,873,645, each assigned to the assignee of the present invention. 

Presently, there are two postage metering device types: a closed system 
and an open system. In a closed system, the system functionality is solely 



dedicated to metering activity. Examples of- closed system metering devices, 
also referred to as postage evidencing devices, include conventional digital and 
analog (mechanical and electronic) postage meters wherein a dedicated printer 
is securely coupled to a metering of'accountifig?function. In a closed system, 

5 typically the printer is securely coupled and dedicated to the meter, and printing 
evidence of postage cannot take place without accounting for the evidence of 
postage. In an open system, the printer is not dedicated to the metering activity, 
freeing system functionality for multiple and diverse uses in addition to the 
metering activity. Examples of open system metering devices include personal 

10 computer (PC) based devices with single/multi-tasking operating systems, multi- 
user applications and digital printers. An open system metering device is a 
postage evidencing device with a non-dedicated printer that is not securely 
coupled to a secure accounting module. An open system indicium printed by the 
non-dedicated printer is made secure by including addressee information in the 

15 encrypted evidence of postage printed on the mailpiece for subsequent 
verification. See U.S. Patents Numbers 4,725,718 and 4,831,555, each 
assigned to the assignee of the present invention. 

The United States Postal Service ("USPS") has proposed an Information- 
Based Indicia Program ("IBIP"), which is a distributed trusted system to retrofit 

20 and augment existing postage meters using new evidence of postage payment 
known as information-based indicia. The program relies on digital signature 
techniques to produce for each envelope an indicium whose origin can be 
authenticated and content cannot be modified. IBIP is expected to support new 
methods of applying postage in addition to the current approach, which typically 

25 relies on a postage meter to print indicia on mailpieces. IBIP requires printing a 
large, high density, two-dimensional ("2-D") bar code on a mailpiece. The 2-D 
bar code encodes information and is signed with a digital signature. 

The USPS has published draft specifications for IBIP. The 
INFORMATION BASED INDICIA PROGRAM (IBIP) INDICIUM 

30 SPECIFICATION, dated June 13, 1996, and revised July 23, 1997, ("IBIP 
Indicium Specification") defines the proposed requirements for a new indicium 
that will be applied to mail being created using IBIP. The INFORMATION 
BASED INDICIA PROGRAM POSTAL SECURITY DEVICE SPECIFICATION, 
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15 



dated June 13, 1996. and revised July 23, 1997, ("IBIP PSD Specification") 
defines the proposed requirements for a Postal Security Device ("PSD"), which is 
a secure processor-based accounting device that dispenses and accounts for 
postal value stored therein to support the creation of a new "information based" 
5 postage postmark or indicium that will be applied to mail being processed using 
IBIP. The INFORMATION BASED INDICIA PROGRAM HOST SYSTEM 
SPECIFICATION, dated October 9, 1996, defines the proposed requirements for 
a host system element of IBIP ( U !BIP Host Specification"). IBIP includes 
interfacing user, postal and vendor infrastructures which are the system 
io elements of the program. The INFORMATION BASED INDICIA PROGRAM 
KEY MANAGEMENT PLAN SPECIFICATION, dated April 25, 1997, defines the 
generation, distribution, use and replacement of the cryptographic keys used by 
the USPS product/service provider and PSDs ("IBIP KMS Specification"). The 
specifications are collectively referred to herein as the "IBIP Specifications". 

The IBIP Specifications define a stand-alone open metering system, 
referred to herein as a PC Meter comprising a PSD coupled to a personal 
computer ("PC") which operates as a host system with a printer coupled thereto 
("Host PC"). The Host PC runs the metering application software and associated 
libraries (collectively referred to herein as "Host Applications") and 
communicates with one or more attached PSDs. The PC Meter can only access 
PSDs coupled to the Host PC. There is no remote PSD access for the PC 
Meter. 

The PC Meter processes transactions for dispensing postage, registration 
and refill on the Host PC. Processing is performed locally between the Host PC 
and the PSD coupled thereto. Connections to a Data Center, for example for 
registration and refill transactions, are made locally from the Host PC through a 
local or network modem/internet connection. Accounting for debits and credits to 
the PSD is also performed locally, logging the transactions on the Host PC. The 
Host PC may accommodate more than one PSD, for example supporting one 
30 PSD per serial port. Several application programs running on the Host PC, such 
as a word processor or an envelope designer, may access the Host Applications. 

The IBIP Specifications do not address an IBIP open metering system on 
a network environment. However, the specifications do not prohibit such a 
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network-based system. Generally, in a network environment a network Server 
controls remote printing requested by a Client PC on the network. Of course, the 
Client PC controls any local printing. 

One version of a network metering system, referred to herein as a "virtual 

5 postage metering system 10", has many Host PCs without any PSDs coupled 
thereto. The Host PCs run Host Applications, but all PSD functions are 
performed on Server(s) located at a Data Center. The PSD functions at the Data 
Center may be performed in a secure device attached to a computer at the Data 
Center, or may be performed in the Data Center computer itself. The Host PCs 

10 must connect with the Data Center to process transactions such as postage 
dispensing, meter registration, or meter refills. Transactions are requested by 
the Host PC and sent to the Data Center for remote processing. The 
transactions are processed centrally at the Data Center and the results are 
returned to the Host PC. Accounting for funds and transaction processing are 

is centralized at the Data Center. See, for example, U.S. Patents Numbers 
5,454,038 and 4,873,645, which are assigned to the assignee of the present 
invention. 

The virtual postage metering system 10 does not conform to all the 
current requirements of the IBIP Specifications. In particular, the IBIP 

20 Specifications do not permit PSD functions to be performed at the Data Center. 
However, it is understood that a virtual postage metering system 10 
configuration with each mailer's PSD located at the Data Center may provide an 
equivalent level of security as required by the IBIP Specifications. 

In conventional closed system mechanical and electronic postage meters 

25 a secure link is required between printing and accounting functions. For postage 
meters configured with printing and accounting functions performed in a single, 
secure box, the integrity of the secure box is monitored by periodic inspections of 
the meters. More recently, digital printing postage meters typically include a 
digital printer coupled to a metering (accounting) device, which is referred to 

30 herein as a postal security device (PSD). Digital printing postage meters have 
removed the need for physical inspection by cryptographically securing the link 
between the accounting and printing mechanisms. In essence, new digital 
printing postage meters create a secure point to point communication link 
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between the PSD and print head. See, for example, U.S. Patent Number 
4,802,218, issued to Christopher B. Wright et at. and now assigned to the 
assignee of the present invention. An example of a digital printing postage meter 
with secure print head communication is the Personal Post Office 
manufactured by Pitney Bowes Inc. of Stamford, Connecticut. 

In U.S. Patents Number 4,873,645 and 5,454,3,038, a virtual postage 
metering system and method are disclosed wherein the postal accounting and 
token generation occur at a data center remote from the postage evidencing 
printer. Although the Data Center may be a secure facility, there remain certain 
inherent security issues since the accounting and token generation functions do 
not occur in a secure device local to the postage printer. The virtual postage 
metering system includes a computer coupled to an unsecured printer and to a 
remote data metering system. The postal accounting and the token generation 
occur at the Data Center. 

The Data Center is a centralized facility under the control of a meter 
vendor, such as Pitney Bowes, or the Postal Service. As such, it is regarded as 
secure compared to the environment that mailers handle meters directly. 
However, data stored at the Data Center is accessible to Data Center personnel 
and, therefore, at a minimum, subject to at least inadvertent modification by such 
personnel. Any unauthorized changes to the user and meter data stored at the 
Data Center compromises the integrity of the virtual postage metering system. 

Summary of the Invention 

It has been determined that a virtual postage metering system provides 
benefits that are not available under conventional postage payment systems. 
For the Posts, a virtual postage metering system provides central management 
of all postage without the need to manage physical meters or PSDs. A further 
benefit is the opportunity to directly associate a mailer to each mailpiece as 
opposed to each reset. For mailers, no metering hardware, i.e. postage meter or 
PSD, is needed. Nor do mailers need to maintain current lists of valid 
addresses, such as with purchased CD-ROMs. Mailers can acquire postage on 
an as-needed basis. Finally, meter vendors do not have to keep track of 



physical meters. A virtual postage metering system eliminates stolen or 
relocated meter problems and simplifies meter management in general. 

The virtual postage metering system is configured with a local PC 
obtaining postage value from a PSD that is remc ; -sy located at the Data Center. 

5 The PC includes a modem or internet connection for accessing the Data Center. 

In accordance with the present invention, a virtual postage metering 
system and method provides value added services corresponding to postage 
metering transactions. Funds are not are stored at a user s site reducing the risk 
of unauthorized modification of accounting balances. There is a database record 

10 of every mailpiece, which means that verification will be improved since all valid 
pieces are known. Furthermore, the present invention enables the Post to know 
the volume of mail to be processed prior to receipt of physical mail pieces. Since 
more mailer data is available (e.g. when users usually mail, how much mail per 
day, average postage amount) the virtual postage metering system enables the 

15 postal service to predict mail handling patterns. Finally, users have the option to 
pay as they go which contrasts present systems in which funds must be on 
deposit prior to being downloaded to a meter although such downloaded funds 
may remain in the meter for weeks before being used. 

Description of the Drawings 

20 The above and other objects and advantages of the present invention will 

be apparent upon consideration of the following detailed description, taken in 
conjunction with accompanying drawings, in which like reference characters 
refer to like parts throughout, and in which: 

Fig. 1 is a block diagram of a virtual postage metering system for 
25 dispensing postage embodying the principles of the present invention; 

Fig. 2 is a bock diagram of the Data Center database server and secure 
box for the virtual postage metering system of Fig. 1 ; 

Fig. 3 is a process flow for postage authorization and printing by a 
postage metering system; 
30 Fig. 4 is a flow chart of the process for evidencing postage by the virtual 

postage metering system of Fig. 1; 
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Fig. 5 is a flow chart of the process performed within the secure meter box 
of the virtual postage metering system of Fig. 1 ; 

Fig. 6 is a flow chart of the process for trickle charge method for 
accounting and distributing funds to multiple origins of deposit in accordance 
5 with the present invention; and 

Fig 7 is a flow chart of a prepayment method for accounting and 
distributing funds to multiple origins of deposit. 

Detailed Description of the Present Invention 

In describing the present invention, reference is made to the drawings, 
10 wherein there is seen in Fig. 1, a virtual postage metering system, generally 
designated 10. Virtual postage metering system 10 prints open system indicia 
for securely evidencing postage. Virtual postage metering system 10 includes a 
plurality (only one is shown) of personal computer (PC) systems, generally 
designated 20, each having access to a printer 22 for printing evidence of 
15 postage on an envelope or label. PC 20 is connected with a transaction 
processing Data Center 30 that performs postal accounting and evidencing of 
postage. The virtual postage metering system 10 allows each mailer to use a 
conventional PC to remotely obtain evidence of postage payment on an as 
needed basis. Unlike conventional postage metering systems, virtual postage 
20 metering system 10 does not include any meter hardware located at the mailer's 
site. Nor are any postal funds stored at the mailer's site. All metering and 
accounting of funds occur at Data Center 30 using functional software and 
database records representing each mailer's "postage meter, referred to herein 
as a "meter account". 

25 The accounting method for virtual postage metering system 10 may be a 

conventional prepayment or post-payment system. The preferred method a 
prepayment method wherein each mailer is required to put a minimum amount of 
money into the mailer's virtual postage metering system 10 account. As account 
funds drop below a specific level a refill is charged against the mailer's account. 

30 An alternate accounting method that is suitable for a virtual postage metering 
system is a real-time payment method in which the amount of a transaction is 
charged to a mailer's credit card account when the transaction occurs. This 
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method is referred to herein as a "trickle charge" postage payment, because the 
mailer does not pay for postage for a mailpiece until the mailer is ready to print 
the mailpiece. 

In the virtual postage metering system, a "meter" vendor, such as Pitney 
Bowes Inc., provides the mailer with client software that runs on PC 20, e.g., the 
client software may be downloaded from the vendor's Internet server. 
Alternatively, the client software may be the Internet browser based home pages 
that provide user interactions with the Data Center 30. The meter vendor also 
manages Data Center 30. The client software initiates communications with 
Data Center 30 which performs metering transactions to evidence postage for 
single mailpieces or batches of mailpieces. In the preferred embodiment, the 
client software establishes a connection to the Data Center, and requests 
postage by providing postal information relating to the requested transactions, 
such as postage amount, addressee information and (optionally) the origin of 
deposit for each mailpiece. Data Center 30 receives the postal information, 
determines the origin zip for the mailpiece(s), performs accounting functions and 
generates an encrypted evidence of postage payment, such as a token or digital 
signature, and sends indicium information including the token, to PC 20. PC 20 
receives the indicium information, creates an indicium bitmap, which can be 
displayed on a PC monitor (not shown) and printed on the mailpiece by printer 
22. PC 20 then disconnects from Data Center 30 or requests another 
transaction. The connection between PC 20 and Data Center 30 may be 
through a Network Service Provider, such as on the Internet, or by direct dial 
using the PC's modem. 

Virtual postage metering system 10 eliminates the need to maintain and 
account for traditional metering devices at each mailer's site and provides 
flexibility for handling requests from multiple origins of deposit by each mailer. 
Virtual postage metering system 10 also provides value added services that are 
not available with conventional meter devices, such as, real-time address 
hygiene, direct marketing services and trickle charge postage payment. Virtual 
postage metering system 10 provides user authentication by Data Center 30 to 
identify mailers with valid accounts. When a mailer has been authenticated for 
each request, for example, by a username, password or other conventional 
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methods. Data Center 30 services the request, and returns indicium information 
to the PC 20 where the indicium is created and printed on the mailpiece. 

Referring again to Fig. 1, the mailer initiates a postage evidencing 
transaction by running client software in PC 20, which contacts Data Center 30. 
At Data Center 30, a Communication Server 32 supports connectivity from 
various communication technologies and protocols. The Communication Server 
merges all incoming traffic and routes it to a Function Server 34, which includes 
application software that supports mailer sign-on, postage dispensing and postal 
reporting. All mailer and meter information is accessed from a Database Server 
36 where the information is securely stored using secure cryptographic 
processes and protocols as described below. Data Center 30 maintains 
cryptographic keys for each meter account in Database Server 36. The 
cryptographic keys are used for postage evidencing and verification as well as 
for security of the records stored in Database Server 36. A Key Management 
15 System 38 administers all cryptographic keys used in virtual postage metering 
system 10. The cryptographic keys may be distributed to verifiers in remote 
locations. U.S. Patent Application Serial Number 08/553812, filed October 23, 
1995, and assigned to the assignee of the present invention, describes such a 

key management system. 

A mailer may establish a meter account through an on-line signup 
process with Data Center 30. During sign-up, the mailer enters, at PC 20, 
account information, such as user name, password and method of payment. 
Any registration fees can be charged at this time. Data Center 30. preferably 
administered by a meter vendor, such as Pitney Bowes Inc.. arranges all meter 
25 licenses and agreements between its mailers and the Post. 

In the present invention, the PSD does not exist, i.e., there is no metering 
device coupled to the PC from which postage payment is requested. Virtual 
postage metering system 10 replaces the accounting and metering functions of 
the PSD with metering software at PC 20 and mailer account information 
30 performed and updated at Data Center 30. The virtual postage metering system 
10 provides each mailer with a metering system that has the capability of 
originating transactions from multiple origins of deposit. See, for example. 
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previously noted International. Patent Application Serial Number [Attorney 
Docket E-735]. 

Various methods can be used to determine the origin of deposit for a 
requested transaction. For example, a method for determining origin zip code 
5 using a caller ID from a telephone call is disclosed in U.S. Patent Application 
Serial Number 08/775,818. filed December 31, 1996, and assigned to the 
assignee of the present invention, which is hereby incorporated in its entirety by 
reference. 

In accordance with the present invention, one or more cryptographic 

10 modules, referred to herein as secure "boxes", are located within Data Center 30 
and are used to perform cryptographic processes. Each secure box is a secure, 
tamper-evident and tamper-responding device, including a processor and 
memory, that stores encryption keys and performs cryptographic operations 
using the keys within the secure boundary of the device. Data Center 30 

15 includes several types of secure boxes, which are described below. In the 
preferred embodiment, Data Center 30 includes multiple boxes of each type for 
redundancy and performance. 

Key Management System 38 includes a manufacturing box (not shown) 
that provides top-level keys used to generate random numbers for seeding each 

20 of the other secure boxes. By sharing a common cryptographic key, the secure 
boxes communicate securely within Data Center 30. Key Management System 
38 also includes a "steel" box (not shown) that shares a common key with meter 
box 44 (described below) to encrypt/decrypt master token keys for postage 
evidencing transactions for each meter account. The steel box merges a vendor 

25 key and a postal key into one record in cipher text. For each meter account, 
Data Center 30 creates a logical meter, i.e. a meter record, in Database Server 
36 by generating a token key using the vendor and postal keys, initializing meter 
registers (ascending and descending), meter freshness data (described below) 
and other postal information as part of the meter record, and then storing the 

30 meter record in Database Server 36. 

Data Center 30 also includes a meter box 44 that shares a secret key with 
the steel box for decrypting the token key encrypted in the meter record. Meter 
box 44 also holds the key used for digital signature of transaction records, which 
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are stored in Database Server 36. The only other information stored in meter 
box 44 is freshness data for each meter record processed by meter box 44. For 
each postage transaction, meter box 44 generates at least one digital token or 
signs the postage transaction, and updates the meter record corresponding to 
the transaction. Each meter record in Database Server 36 includes postal funds 
as well as the token keys in cipher text. Meter box 44 uses the token keys to 
generate tokens, updates the postal funds in the meter record, and signs the 
updated meter record. In this manner, meter box 44 performs and controls the 
secure accounting for each transaction. Meter box 44 can also be used to verify 
the token or the transaction signature for verification of the postage evidencing 

for the transaction. 

Data Center 30 also includes an authentication box 40 that shares a 
different secret key with the steel box to decrypt an user authentication key 
stored in cipher text in Database Server 36. Authentication box 40 also executes 
the authentication algorithms using the decrypted authentication key to 
authenticate a mailer. This function may be added to the steel box of key 
management system 38 to eliminate the need for a separate box at Data Center 
30. 

Finally, Data Center 30 includes an transaction box 42 that shares 
another secret key with the steel box to sign user transaction records other than 
the meter records signed by meter box 44. such as logins and login history 
records. Transaction box 42 later verifies the transaction record signature when 
the next transaction is requested. 

Referring now to Fig. 2, a configuration of Database Server 36, including 
a meter database 60, a mailer database 62 and a database of meter records 64, 
is shown. Meter database 60 comprises meter information associated for each 
meter account, such as, meter serial number, record update counter, ascending 
register, descending register and other postal values. Meter Database 60 also 
includes storage of transaction records signed by meter box 44. The transaction 
records comprise, for example, origin postal code, transaction date/time, 
indicium date, delivery postal code, token(s). postage amount, and the digital 
signature. Mailer database 62 comprises mailer information and information that 
associates a mailer with a meter account. 
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In operation, Communication Server 22 receives a request for a meter 
transaction from mailer PC 20. The application software in the Function Server 
34 controls the processing of the transactic request. Function Server 34 
accesses mailer database 62 and meter databa 60 to obtain records, including 

5 the appropriate meter record 64, corresponding to the meter account of the 
mailer initiating the request. Function Server 34 communicates mailer records 
from mailer database 62 to authentication box 40, which then authenticates the 
mailer requesting the transaction. Once the mailer has been authenticated, 
Function Server 34 communicates the appropriate meter record 64 to meter box 

10 44, which verifies a signature and freshness data for the record. Meter box 44 
decrypts the encrypted key(s) that are stored within meter record 64, performs 
accounting functions on the ascending and descending registers in meter record 
64, and uses the key(s) to generate a token for the requested transaction. Meter 
box 44 then generates data for an indicium, and resigns meter record 64. The 

15 updated and signed record is then sent back to Database Server 36 where it is 
stored as part of meter database 60. 

At Data Center 30,the authentication keys are not available in plain text, 
but must be distributed to the mailer. Conventional methods of distributing and 
updating the authentication key for each mailer can be used. See, for example, 

20 previously noted U.S. Patent Application Serial Number 08/553812, which 
describes a key management system for distributing and updating cryptographic 
keys to the secure boxes and the mailer's PC. 

One of the important tasks for key management system 38 is to obtain the 
postal key and associate it with a vendor key. In key management system 38, 

25 the steel box creates a meter serial number, manufacturing number, vendor and 
postal keys in one meter record 64 for each meter account. 

For the encryption/decryption algorithms, a set of triple DES keys are 
used for encrypting the encryption keys for generating a tokens or signatures for 
indicia. Another set of triple DES keys are used for signing meter records. 

30 Meter box 44 securely stores both sets of triple DES keys. In order avoid using 
only one key to encrypt the entire set of meter keys for generating a tokens or 
signatures for indicia, a derived key is used. The first set of triple DES keys 
derives triple DES keys by encrypting the meter (account) serial number in each 
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meter record. The derived triple DES keys then encrypt the encryption keys for 
the indicia which are to be stored in the Database Server 36. The second set of 
triple DES keys for signing uses a similar scheme to derive the signature keys in 
a similar manner, i.e. using the meter serial number as data to derive keys. It 
will be understood that one set of triple DES keys can be used for both 
purposes. However, it is desirable that each set of keys be used only for one 
purpose. 

In the preferred embodiment of the present invention, one common key is 
used to sign all transactions and records that require a digital signature, such as, 
meter records, postage transactions, funds transfer records, master account 
records, etc. Multiple boxes of each box are used for redundancy and to share 
the workload as the number of transactions grow. The signing box, such as 
meter box 44 or authentication box 40, will also verify the signature of a record? 

With regard to the signature algorithm for meter record 64, a message 
authentication code (MAC) is employed to provide message integrity for the 
sensitive virtual postage metering system 10 records. This MAC involves 
multiple applications of the Data Encryption Standard (DES). The signature keys 
will be updated using the current month and year. During manufacturing, two 
initial master keys will be entered into the non-volatile memory (NVM) of meter 
box 44. NVM is used both for permanent storage and for the prevention of 
external access to the key information. The keys for indicia and the keys for 
signature are derived in a conventional manner, such as described above. The 
virtual postage metering system 10 record signature verification algorithm simply 
recalculates the signature of the meter record 64 using the signature algorithm 
and data within meter record 64 and compares calculated signature to the 
signature in meter record 64. 

Referring now to Fig. 3, a typical process flow for postage authorization 
and printing is shown. The process includes operations occurring in four 
modules in a postage metering system: a mail generator module 80, a rating 
module 82, an accounting module 84 and an encryption module 86. The mail 
generator module 80 includes a list of addresses and a list of postal rate 
parameters. The rating module 82 includes the current rate table and a rate 
table signature which authenticates the current rate table. The accounting 
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module 84 includes an ascending register (AR), a descending register (DR) and 
a piece count. The encryption module 86 includes cryptographic keys, origin ZIP 
information and an identification of the postage metering system (meter ID). 

In virtual postage metering system 10, mail generator module 80 resides 
5 in PC 20 and the rating, accounting and encryption modules reside at Data 
Center 30. The encryption module 86 resides in meter box 44, and the 
accounting module 84 resides in part in meter box 44 (AR, DR and piece count) 
and in Database Server 36 (accounting functions). The rating module 82 
preferably resides in Database Server 36, however, the rating module may 
10 reside in PC 20. In a PC metering system, the accounting and encryption 
modules would reside in the PSD and the mail generator and rating modules 
would reside in the Host PC. 

The following process is described for a postage evidencing transaction 
for a single mailpiece. It will be understood that the process may also be used 
is for postage evidencing transactions for a batch of mailpieces. 

The process begins with mail generator module 80 initiating a request for 
postage. Prior to this request for postage, a user has selected (for each 
mailpiece) a mailing address from the address list and entered or defaulted to 
various rate parameters for a mailpiece. The rating module 82 receives the 
20 request with the rate parameters, calculates postage amount and requests 
postage evidencing. It is noted that the user may enter a postage amount, which 
could be one of the rate parameters in which case, the rating module would 
defer to the entered postage amount. The accounting module 84 approves the 
request for postage evidencing, subtracts the postage amount from the 
25 descending register, adds the postage amount to the ascending register and 
increments the piece count. Once the accounting has been completed, the 
encryption process is enabled. The encryption module 86 performs the 
encryption function using the postal and vendor keys, origin ZIP received from 
mail generator module), meter ID, AR and DR and piece count (collectively 
30 referred to as postal data). The encryption function, which is a cryptographic 
transformation computation that utilizes, for example, a secret key to produce digital 
tokens/signatures, provides one or more digital tokens or digital signatures of the 
previously noted postal data. The postal data and digital tokens/signatures are 
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collectively referred to herein as indicium data. The mail generator receives the 
indicium data, optionally verifies that sufficient postage has been paid and prints 
the indicium. 

Referring now to Fig. 4, the process for securely performing a postage 

5 evidencing transaction in a virtual postage metering system is described. At step 
100, Communication Server 32 receives a request for postage evidencing from 
mailer PC 20. At step 105, Function Server 34 requests access to the mailers 
account information stored in Database Server 36. At step 110, Database 
Server 36 sends mailer information, meter information, including a meter record 

io associated with the mailer initiating the request. At step 115, Function Server 34 
sends the mailer information to Authentication Box 40. When the mailer is 
authenticated at step 120, then, at step 125, Function Server 34 sends the meter 
information, including the meter record to meter box 44. At step 130, meter box 
44 authenticates the meter record, decrypts the encrypted token key which is 

15 part of the record, verifies freshness of the record, performs accounting, 
generates a token, updates the freshness data and signs the meter record, 
which is returned to Function Server 34. At step 135, Function Server 34 sends 
the updated and signed meter record to Database Server 36 and sends to the 
Communication Server 32 the token and associated postal information needed 

20 to create an indicium. At step 140, Database Server 36 stores the updated and 
signed meter record. At step 145, Communication Server 32 sends the token 
and postal information to mailer PC 20. 

Referring now to Fig. 5, the process performed within the secure meter 
box of the virtual postage metering system is described. At step 200, meter box 

25 44 receives a signed meter record. At step 205, the signature of the meter 
record is verified. If not verified at step 210, then, at step 215, the meter box 
ends the transaction and alerts the Function Server 34 for possible tampering. If 
the signature has been verified, then, at step 220, the meter box compares 
freshness data that is stored in meter box for each meter account to freshness 

30 data stored as part of the meter record. The freshness data chosen for this 
comparison must be data that is unique for each transaction. In the preferred 
embodiment, the record update counter is used, however a random number, 
time stamp or other nonce may be used. The comparison at step 220 prevents 
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inadvertent or intentional substitution of an old meter record for the current meter 
record during the virtual postage metering transaction. 

At step 225, if the compared freshness data are not identical, then, at step 
230, the meter box ends the transaction and alerts the Function Server 34 for 

5 possible tampering. If the freshness data stored in the meter record is identical 
to the freshness data associated with the meter record which is stored in the 
meter box, then, at step 235, the meter box decrypts the token key that was 
received in encrypted form as part of the meter record. At step 240, the meter 
box performs accounting functions for the transaction, such as incrementing the 

10 ascending register, decrementing the descending register and incrementing the 
record update counter. At step 245, the freshness data in the meter record is 
updated. At step 250, the freshness data stored in meter box 44 is updated. At 
step 255, the meter box generates the token using the decrypted token key. At 
step 260, the meter box updates the meter record by storing the new register 

15 values and record update counter in the meter record, and then signs the 
updated record using a key stored in the meter box. At step 265, the meter box 
sends the updated and signed meter record to Database Server 36 for storage 
until the next transaction for the meter account assigned to the meter record. 

Referring now to Fig. 6 t the process for distributing funds in accordance 

20 with a trickle charge method of payment begins at step 300, with the mailer, 
through PC 20, authorizing use of a credit card account to a funds control center, 
such as a bank. (Such authorization may occur through the Data Center to the 
funds control center.) At step 305, the funds control center acknowledges such 
authorization and notifies Data Center 30. At step 310, the Data Center 

25 activates the mailer's PSA by assigning the mailer's credit card account to it and 
notifies the mailer. At step 315, the mailer, through PC 20 f initiates a request for 
indicium information from the Data Center 30, providing postal information, such 
as, postage amount and destination information. At step 320, Data Center 30 
responds to the request by verifying sufficient funds are available, charging the 

30 mailer's credit card account, determining valid origin zip for the request, 
calculating a digital token or digital signature corresponding to the postal 
information provided with the request, and forwarding the indicium information 
including the digital token to PC 20. Data Center 30 also stores information 
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relating to each transaction as a historical record to be forwarded to the Postal 
Service at a predetermined interval. At step 325, PC 20 obtains the indicium 
information from Data Center 30, generates an indicium bitmap and prints the 
indicium on the mailpiece. At some predetermined interval, for example daily, at 

5 step 330, Data Center 30 notifies the Postal Service of the total postage amount 
for each meter ID (PSA) and origin zip combination by forwarding the historical 
record to the Postal Service. At step 335, the Postal Service combines the 
transactions for each origin zip to determine the amount owed to each origin zip 
(local) post office. At step 340, the Postal Service assigns an appropriate 

10 amount of funds from the funds control center to each local post office. 
Alternatively, steps 335 and 340 could be performed at the Data Center or funds 
control center.) 

Referring now to Fig. 7, the process for distributing funds in accordance 
with a prepayment version of the present invention begins at step 400, with the 

15 mailer, through PC 20, sending funds to a funds control center, such as a bank. 
At step 405, the funds control center acknowledges such authorization and 
notifies Data Center 30. At step 410, the Data Center adjusts the PSA for the 
mailer to account for the additional funds and notifies the mailer. At step 415, 
the mailer, through PC 20, initiates a request for indicium information from the 

20 Data Center 30, providing postal information, such as, postage amount and 
destination information. At step 420, Data Center 30 responds to the request by 
verifying sufficient funds are available, debiting the mailer's account, determining 
valid origin zip for the request, calculating a digital token or digital signature 
corresponding to the postal information provided with the request, and 

25 forwarding the indicium information including the digital token to PC 20. Data 
Center 30 also stores information relating to each transaction as a historical 
record to be forwarded to the Postal Service at a predetermined interval. At step 
425, PC 20 obtains the indicium information from Data Center 30, generates an 
indicium bitmap and prints the indicium on the mailpiece. At some 

30 predetermined interval, for example daily, at step 430, Data Center 30 notifies 
the Postal Service of the total postage amount for each meter ID (PSA) and 
origin zip combination by forwarding the historical record to the Postal Service. 
At step 435, the Postal Service combines the transactions for each origin zip to 
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determine the amount owed to each origin zip (local) post office. At step 440, 
the Postal Service assigns an appropriate amount of funds from the funds 
control center to each local post office. 

Function Server 34 performs the following process for user sign-up. 

5 Function Server 34 validates received sign-up information received from PC 20. 
Accessing Database Server 36, Function Server 34 obtains the next available 
master account ID number and the next available customer ID number from the 
database. Function Server 34 then creates a new master account record and, in 
conjunction with Key Management System Server 38, generates keys for the 

10 new meter account Function Server 34 server transfers funds from the newly 
created master account to the new meter account. Function Server 34 creates a 
new meter record 64 which is stored in meter database 60 in Database Server 
36 and a new mailer record which is stored in mailer database 62 in Database 
Server 36. 

15 During sign up of new mailers, the mailer's address information is entered 

at PC 20. The Virtual postage metering system 10 client software running in PC 
20 selects the zip code from the address information entered by a user. The zip 
code is checked to be a valid zip code and is assigned as the origin of deposit 
for the user's account. The signup request is transmitted to the Data Center 30. 

20 Function Server 34 receives the request for a new mailer account and processes 
the request as set forth above to establish a new meter record 64. The meter 
record 64 is then associated with the origin of deposit from the signup request, 
which becomes the default origin of deposit for meter record 64. 

Function Server 34 performs the following process when a request for a 

25 postage transaction is received from PC 20. Function Server 34 checks the 
validity of the postal data, such as date of mailing, amount of postage, origin 
postal code and destination address, that is received with the request. If not 
valid, Function Server 34 exits the process. If valid, Function Server 34 
communicates with Database Server 36 to retrieve the meter record 64 

30 corresponding to the user initiating the request. Function Server 34 verifies 
sufficient funds are available in the user's account for the requested transaction. 
If sufficient funds are available, Function Server 34 sends the meter record and 
the postal data to meter box 44 which performs the process set forth above. 
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When meter box completes the accounting process, Function Server 34 
constructs the postage transaction record reflecting the completed transaction, 
signs it and sends it to Database Server 36 for storage. Function Server 34 also 
sends the updated meter record 64 that is receives from meter box 44 to 
Database Server 36 for storage. 

Database Server 36 includes records of mail volumes and accounting of 
postal funds within it database. By access Data Center 30, the postal service 
can perform on-line tracking of selected information available from Data Center 
3. Such information includes volumes of mail pieces processed or in process, 
allocation of funds to originating post offices and meter account use. Such on- 
line tracking allows the postal service to manage it resources in a more efficient 
manner. For example, the postal service could identify locations with peak 
workloads and could determine Ideations of mail fraud by comparing mail 
volumes with expected postal revenues. 

Fundamental to virtual postage metering system 10 is the information that 
is available within the files and records stored in Database Server 36. As 
described above, Data Center 30 provides typical metering related administrative 
services, such as evidencing postage, creating user accounts, authenticating 
users, registering new meter accounts, activating and deactivating meter 
accounts, managing postage funds, and logging transactions and meter usage. 
Data Center 30 provides reports on postage transactions and meter usage to the 
user, to the administrator, such as Pitney Bowes Inc., and to the postal service. 
The reports can be organized by user account (and user's departmental 
accounts), indicia serial number, and/or origination zip, as requested. 

Data Center 30 has the capability of handling simultaneous execution of 
multiple transaction types, such as on-line and deferred transaction execution. 
Data Center 30 provides reception, queuing and execution of multiple 
requests/services concurrently. 

Data Center 30 "manufactures" meters, i.e. metering accounts, registers 
meters, licenses meters, activates valid meters, and deactivates invalid meters 
from normal operation (i.e. out of service meters). The manufacturing of a meter 
entails associating the manufacturing number with the meter keys (such as 
postal key and the vendor key). The keys are securely installed and verified. 
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Function Server 34 interfaces with the Key Management System Server 38 for 
installing keys, verifying keys, and registering meters. Meters are activated by 
assigning one or more users the privilege of using the metering account. The 
meter is associated with a meter record that includes an indicia serial number, 

5 manufacturing number, postal key, vendor key and piece count. 

The meter (i.e. indicia serial number) is associated with an origin postal 
code (e.g., origination zip code) to accommodate postal deposit restrictions and 
accounting of postal funds. Data Center 30 registers meters for the postal 
service by associating an indicia serial number with an origination zip code, and 

10 filing the appropriate postal forms. If the meter has an origin postal code of 
"00000", the user shall be able to select the origin of deposit. A floating origin of 
deposit, "OOOOO", allows customers to use their on-line meters from a variety of 
locations. 

Data Center 30 creates, deletes, modifies and authenticates users. Data 

15 Center 30 sets up and modifies access rights for the users to request 
transactions, purchase postage, and receive administrative services. Meters 
may be deactivated from normal operation temporarily or permanently, due to 
insufficient funds, inspection, credit abuses or meter abuses. 

Value-Added Services 

20 Virtual postage metering system 10 provides value-added services for the 

user and the postal service. Data Center 30 allows the user access to user 
account information, on-line rates, special mail services, address cleansing and 
postal coding services. Data Center 30 shall allows the Post access to postal 
revenue accounting (postage used by origin postal codes) and to transfer files 

25 containing address changes. The user may request accounting services by 
master account, department, meter and user. 

Data Center 30 provides the ability to cleanse an address (i.e. make 
corrections to invalid addresses) and attach postal coding. See, for example, 
U.S. Patent Number 5,454,038. Data Center 30 provides domestic and 

30 international postal rates. PC 20 can be integrated with a scale for input into the 
postal rating process. Data Center 30 provides on-line services such as certified 
mail and special receipts. Data Center 30 provides on-line tracking of postal 
funds and mail volumes to authorized postal employees. 

20 



Data Center 30 provides a change of address service to the users. The 
data center shall provide mechanism to accept a list of addresses from the post 
and manage the list. Addresses accepted from the user are checked against the 
list from the post to determine if any of the addresses have changed. The data 

5 center shall notify the user of addresses that have changed. 

Virtual postage metering system 10 includes load balancing capability 
which Data Center 30 to process requests from all remote users in a timely and 
efficient manner. Load balancing as applied to Virtual postage metering system 
10 ensures that each new request for service is directed to the least used 

10 resource in a system where there are multiple resources providing the same 
service. This applies to VM resources like Communication Server 32, Functional 
Server 34, Database Server 36, Key Management System Server 38 and the 
secure boxes in Data Center 30. 

Virtual postage metering system 10 includes communication architecture 

15 that understands where the application services are located and the number of 
users connected to each server. This information allows the communication 
architecture to control the following features, Dynamic load balancing, 
redundancy and geographic distribution of the virtual meter server. 

Dynamic load balancing is a method to allow multiple servers to connect 

20 to new users depending on how busy the server currently is. Redundancy is a 
method to allow multiple virtual meter servers to reside simultaneously on a 
network, such that, if a main server goes down for any reason, the backup server 
passes all information to the other corresponding on-line server(s). Geographic 
distribution is the ability to locate servers locally on a network over a Wide Area 

25 Network. 

Virtual postage metering system 10 uses distributed processing for load 
balancing the servers at Data Center 30 to improve performance. The 
communications servers accept requests for service from each PC 20 accessing 
Data Center 30. Function servers are registered upon startup. The 
30 communications servers select a function server for processing the service 
request. The service request is added to the function server's wait queue. 
When the function servers reaches 80% utilization, another function server is 
spawned and registered with the active servers. The function servers check the 
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wait queue for service requests and process these requests. Idle function or 
communication servers are unregistered and shutdown, removing them from the 
active servers list. Database servers are registered to accept database requests 
similarly to function servers. Multiple servers are running simultaneously to 

s handle the workload. 

It will be understood that although the embodiments of the present 
invention are described as postage metering systems, the present invention is 
applicable to any value metering system that includes transaction evidencing, 
such as monetary transactions, item transactions and information transactions. 

10 While the present invention has been disclosed and described with reference to 
a single embodiment thereof, it will be apparent, as noted above, that variations 
and modifications may be made therein. It is, thus, intended in the following 
claims to cover each variation and modification that falls within the true spirit and 
scope of the present invention. 

15 

Personal Post Office is a trademark of Pitney Bowes Inc. 
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What is Claimed is : 

1. A method for evidencing postage on a mailpiece comprising the 
steps of: 

receiving at a data center postal information relating to a mailpiece, said 
5 postal information including recipient address information for the mailpiece; 

generating a digital token for the mailpiece, said digital token including 
encrypted information for the mailpiece based on said recipient address 
information; 

creating a transaction record, said transaction record including the digital 
10 token and the postal information; 

signing the transaction record; 

storing the transaction record in a database; and 

performing value added services using the transaction record. 



15 2. A system for dispensing postage value, comprising: 

a data center communicatively coupled to a plurality of remote 
processors, said remote processors initiating requests to the data center for 
dispensing postage value to be printed by a printer controlled by the remote 
processor, the data center comprising: 
20 means for communicating with the remote processors, said 

communicating means receiving said requests for dispensing postage 
value; 

means coupled to the communicating means for storing data 

records, said data records including user account information and meter 
25 account information associated with a plurality of users of users accessing 

the data center through said remote processors; 

means coupled to the communicating means and the storing 

means for metering using said user account information and said meter 

account information; and 
30 means coupled to the communicating means, the storing means 

and the metering means for performing administrative functions within the 

data center. 
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3. The system of claim 2 wherein the communicating means includes 
a communication server, the storage means includes a database server, the 
means for performing administrative functions includes a function server, and 
said metering means includes a secure meter box. 

4. The system of claim 3 wherein each user has at least one meter 
account, each said meter account being assigned to one of the users accessing 
the data center. 



5. The system of claim 3 wherein said secure meter box and said 
function server control the dispensing of postage value from each said meter 
account. 

6. The system of claim 3 wherein said administrative functions include 
creating and signing transaction records which are stored at said database 
server, each of said records corresponding to each postage dispensing 
transaction. 



7. The system of claim 6 wherein said function server provides value- 
added services, said value-added services including on-line rating, special mail 
services, address cleansing and postal coding services. 

8. The system of claim 6 wherein said administrative functions include 
performing on-line track of all postal transaction processed by the data center. 
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